#!

###########################
# WebFilter Settings Profile
###########################
#
# Settings provide the config for "https scanning without deep scan"
#
config webfilter profile
edit mydomain1-default.local
set options https-url-scan
set https-replacemsg disable
set extended-utm-log enable
config web
set log-search enable
end 
set log-all-url enable 
set web-content-log enable 
set web-filter-activex-log enable 
set web-filter-command-block-log enable 
set web-filter-cookie-log enable 
set web-filter-applet-log enable 
set web-filter-jscript-log enable 
set web-filter-js-log enable 
set web-filter-vbs-log enable 
set web-filter-unknown-log enable 
set web-filter-referer-log enable 
set web-filter-cookie-removal-log enable 
# set web-filter-sdns-action: redirect 
# web-filter-sdns-portal: 0.0.0.0
set web-url-log enable 
set web-invalid-domain-log enable 
set web-ftgd-err-log enable 
set web-ftgd-quota-usage enable 
end
###########################
# WebFilter Settings Content Header
###########################
config webfilter content-header
edit 1
set comment "exempt from antivirus scanning"
config entries
edit "video\\/.*"
set action exempt
next
edit "audio\\/.*"
set action exempt
next
end
set name "exempt-antivirus-scanning"
next
end
config webfilter profile
edit mydomain1-default.local
config web
set content-header-list 1
end
next
end

###########################
# WebFilter Settings URL Filter
###########################
config webfilter urlfilter
edit 1
config entries
edit "*.apple.com"
set type wildcard
set action exempt
next
edit "*.itunes.apple.com"
set type wildcard
set action exempt
next
edit "*.phobos.apple.com"
set type wildcard
set action exempt
next
edit "*.apple.com.edgesuite.net"
set type wildcard
set action exempt
next
edit "*.windowsupdate.com"
set type wildcard
set action exempt
next
edit "*.download.windowsupdate.com"
set type wildcard
set action exempt
next
edit "*.stats.update.microsoft.com"
set type wildcard
set action exempt
next
edit "*.msftncsi.com"
set type wildcard
set action exempt
next
edit "*.microsoft.com"
set type wildcard
set action exempt
next
end
set name "mydomain1-default.local"
next
end
config webfilter profile
edit mydomain1-default.local
config web
set urlfilter-table 1
end
next
end
